bugGNUstep - Bugs: bug #42411, gdomap chroots to /tmp

 
 

You are not allowed to post comments on this tracker with your current authentification level.

bug #42411: gdomap chroots to /tmp

Submitted by:  Yavor Doganov <yavor>
Submitted on:  Fri 23 May 2014 04:54:06 PM UTC  
 
Category: Base/FoundationSeverity: 3 - Normal
Item Group: BugStatus: None
Privacy: PublicAssigned to: None
Open/Closed: Open

Sun 13 Jul 2014 11:05:28 AM UTC, comment #2:

I don't know either, I'll ask the original bug submitter.

> is there a debian specific standard for this which
> could be conditionally compliled when building on a
> debian system?


I don't think so. I believe this was not caught by an automatic security-check tool. It's just that some people have a habit to review daemons' code and gdomap seems to be getting a lot of attention :-)

Yavor Doganov <yavor>
Sun 13 Jul 2014 07:42:10 AM UTC, comment #1:

I don't mind making things even more paranoid, but I don't know of an empty, non-writable directory that the program can reliably move to, and creating a directory which could then not be cleaned up on program termination (because the program is chrooted inside it) does not seem an acceptable option.
Is there a standard portable way to do this (a quick internet search didn't reveal anything to me)?
Failing that, is there a debian specific standard for this which could be conditionally compliled when building on a debian system?

Richard Frith-Macdonald <CaS>
Project Member
Fri 23 May 2014 04:54:06 PM UTC, original submission:

Another report from Debian, original URL:
http://bugs.debian.org/741441

"gdomap chroots to /tmp "as another level of paranoia". However if you are paranoid, you really want to chroot to an empty, non-writable directory, not to a world-writable one containing random files."

Yavor Doganov <yavor>

 

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -unavailable- added by CaS (Posted a comment)
  • -unavailable- added by yavor (Submitted the item)
  • -unavailable- added by yavor
  •  

    Do you think this task is very important?
    If so, you can click here to add your encouragement to it.
    This task has 0 encouragements so far.

    Only logged-in users can vote.

     

    Please enter the title of George Orwell's famous dystopian book (it's a date):

     

     

    Follows 1 latest change.

    Date Changed By Updated Field Previous Value => Replaced By
    Fri 23 May 2014 04:54:06 PM UTCyavorCarbon-Copy-=>Added -unavailable-

    Back to the top


    Powered by Savane 3.1-cleanup